Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
File: LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft (raw, json)
Hash identifier: hPa7bzh5fJ96LLuZG7BEUP4qO6bd08LaGQm9ALPg80A=
Subject key identifier: 7C:7D:78:1F:0E:64:12:16:DE:E0:06:CC:7B:FA:82:72:4D:8C:24:A3
Authority key identifier: 2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
Certificate issuer: /CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Certificate serial: 01A0D15B8587A9C3C028C777BB552DB8B979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
Manifest number: 0A5E
Signing time: Thu 24 Sep 2026 03:00:30 +0000
Manifest this update: Thu 24 Sep 2026 03:00:30 +0000
Manifest next update: Fri 25 Sep 2026 03:00:30 +0000
Files and hashes: 1: G8YCS6i0g0ubDbA7T2_j3kguxlE.roa (hash: qHRsf2eTwCBKp1PGCkPmqwvIHubp6Ujq79DZ3/G/6VI=)
2: LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl (hash: iB8EZRVeX0WMzXWciWAFznQG+IxJz7D1y4dx4se6OHk=)
3: _Q66pLzef8HiB2dIFrB73IR2x2g.roa (hash: nOI8zIBVSnJqmIf0/LULlXY1T16i45MjeJq+7As4mVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:5b:85:87:a9:c3:c0:28:c7:77:bb:55:2d:b8:b9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d0d62129d02063d409ebfb01c648d46f34889e0
Validity
Not Before: Sep 24 03:00:30 2026 GMT
Not After : Sep 25 03:00:30 2026 GMT
Subject: CN=7c7d781f0e641216dee006cc7bfa82724d8c24a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e4:85:c7:d8:44:ce:a9:05:1e:3d:92:3c:e9:
46:d9:19:e7:e4:6e:7f:d0:05:dd:3e:bd:2e:39:e0:
eb:61:0f:20:07:fe:8a:ba:d1:f8:63:a5:db:54:14:
06:1e:bb:2b:97:7d:b1:18:42:4a:09:2b:f6:76:81:
41:91:d8:88:85:f1:07:e1:bf:56:06:6c:05:0c:8c:
15:df:50:c6:80:3b:bb:1e:28:ad:cf:be:6b:2c:39:
60:0b:65:26:00:b2:d9:52:7c:64:52:72:19:f5:60:
bb:ce:ce:da:4b:85:f3:6d:72:69:34:0d:8f:dc:2a:
83:bf:60:1d:05:dc:c1:b5:c3:e0:4a:42:92:91:23:
15:e9:86:bd:6d:2a:4c:5f:43:67:af:16:86:73:c2:
96:8d:05:f6:09:c6:bd:b2:0e:0a:0c:d4:83:0a:9d:
51:83:c2:e7:37:5f:29:e3:c8:94:9c:fb:30:4b:60:
10:68:28:c4:f6:72:82:7c:bb:ce:6e:b8:c3:d9:00:
32:a1:25:c6:b7:be:d4:fc:44:33:8e:f5:16:ad:90:
a2:f8:f8:49:c3:c3:95:65:2a:79:1b:a0:cb:1d:7a:
e6:eb:12:a9:31:5b:59:2c:89:33:f7:72:d1:e6:34:
04:18:53:58:f2:89:50:6d:e1:88:fa:11:dd:59:c6:
30:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7D:78:1F:0E:64:12:16:DE:E0:06:CC:7B:FA:82:72:4D:8C:24:A3
X509v3 Authority Key Identifier:
keyid:2D:0D:62:12:9D:02:06:3D:40:9E:BF:B0:1C:64:8D:46:F3:48:89:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LQ1iEp0CBj1Anr-wHGSNRvNIieA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/060f7e-8cf0-4ec2-af7a-1daea4bc94b3/1/LQ1iEp0CBj1Anr-wHGSNRvNIieA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:99:12:42:92:6a:2c:db:97:80:aa:40:91:f9:9e:84:1e:b9:
98:18:e6:d1:6e:65:08:7f:f3:1c:a4:81:4c:ed:5b:d6:08:ed:
24:31:0f:b0:8a:21:43:30:8c:d3:71:e4:b3:17:b7:06:0b:17:
52:01:ae:7b:bb:9f:61:59:56:e6:ef:07:f6:f5:57:fd:c4:fa:
16:1e:5b:6e:76:66:d5:09:0f:c3:3d:1f:cb:06:1f:45:12:60:
b0:0e:7c:b2:2b:a0:43:3f:21:44:3d:77:ee:2a:82:b6:c3:b8:
7e:68:01:c7:ff:bc:5e:93:77:2c:56:5a:ec:f3:00:5c:c9:0b:
71:d6:81:43:f5:2e:bc:89:ae:59:cf:fd:6f:d9:f4:59:5e:1b:
36:0d:90:30:e4:e5:8b:13:4e:3b:ac:35:f3:67:0c:20:c2:38:
30:cb:5b:9f:18:ab:1e:b7:00:66:66:cc:6f:39:7b:dc:5a:10:
93:c5:40:92:af:da:4c:e7:a6:21:b8:e6:57:3b:fa:fb:99:31:
c1:c8:c8:86:5b:70:1e:27:43:79:90:d0:f5:cc:cc:51:a9:a3:
1f:88:53:bc:7a:92:87:71:03:5f:f4:47:72:e6:db:63:4b:0e:
47:33:c1:f5:38:f4:78:8d:a7:4e:59:ca:00:9f:7a:2b:a0:00:
b9:e8:13:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:59:15 2026 by rpki-client